Threat actors have abused the TeamFiltration pentesting framework to target over 80,000 Entra ID user accounts.